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ODP-81-421 
31 March 198], 

y • ■ ' 

MEMORANDUM FOR: Director of Information Services 
: Director of Data Processing 

Security Officer, ODP 

: Application of Automatic Data Processing 

Systems to Information Security 

: OIS Memo, OIS 81-249/1 

dated 13 March 1981 


THROUGH 

FROM 

SUBJECT 

REFERENCE 


1. The Office of Data Processing provides and develops 
software applications for Agency users who establish program 
requirements for security of information. ODP also provides 
physical and systems security for protecting access to ^ he , 
hardware, developing, and installing software security features 
and ^oreiost by L/tricting access to the systems by operating rn 
a "Systems High Mode." 

2. It would be more appropriate for the users responsible 
for the creating, accountability and disposal of classified 
National Security Information to comment on the results of the 
use of ADP Systems in support of their information secun y 
program. 


On 26 March 1981, 


] OIS, stated that 


s _ un z o ncuuii i i , . 

he was advised by the Information System Security Group/OS that 
the Chief of that group would supply information for the G-A 
inquiry and was in agreement with the above ODP response. 


STAT 


stAt 


j 

i 
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MEMORANDUM FOR: Director of Data Processing 
Director of Security 

FROM: Thomas H. White 

Director of Information Services 

SUBJECT: Application of Automatic Data Processing Systems to 

Information Security 


1. The attached letter from the Director of the Information Security 
Oversight Office (ISOO) directed to me requests Agency support in a study 
ISOO is conducting on the application of automatic data processing (ADP) 
systems to information security. The Office of Information Services does 
not have the information available to complete the questionnaire included, 
nor do we know your feelings as to whether or not the Agency desires to 
support this study. 

2. I would appreciate it if you would review the attached letter and 
the survey questions, supplying any information you feel appropriate. If 
you feel it inappropriate for the Agency to participate in the study, please 
let me know so that I may so advise the Director of ISOO. In either case, 
may I have you response by 27 March so that I may reply prior to his 

31 March deadline. 



STAT 
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General 


Information Securirv 




iiZiJfyL J- 


" ’ ■' * ' ; l -J : 'J l 

Mr. Thomas H. White 
Director of Information Services 
Central Intelligence Agency 
Washington, DC 20505 

Dear Tom: 

The Information Security Oversight Office (ISOO) is conducting' a preliminary study on 
the application of automated data processing (ADP) systems to information security. 

The objective is to study the present day uses of ADP technology as it relates to the 
creation, accountability, and disposal of classified national security information and to 
determine if and/or how it can be applied on a government-wide basis to enhance the 
information security programs in the various agencies. 

To assist in attaining our objectives in this study, 1300 has prepared a list of survey 
questions. Since your agency is known to use ADP systems as support in some of your 
information security programs, a copy of the survey questions is enclosed. 

I ask your voluntary support in this matter and urge you to answer and return to ISOO the 
enclosed survey questions by March 31, 1981. At some later date we may expand our study 
to include an overview of computer systems in the agencies. If so, this will be handled 
through personal interviews. 

Please direct any questions or comments to me or June Payne. We may be reached at 
633-6880. 


Sincerely, 



STEVEN GARFINKEL 
Director 

Enclosure 
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IS00 SURVEY 

USE OF ADP EQUIPMENT/SYSTEMS * 
IN INFORMATION security programs 

AGENCY: — 

ACTIVITY, OFFICE, DIVISION: 

NAME AND TITLE OF RESPONDER: — — — 

DATE: — — — — 


NOTE: FOR THE PURPOSE OF THIS STUDY, ADP EQUIPMENT/SYSTEMS DOES NOT INCLUDE WORD 
PROCESSING EQUIPMENT. 
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V/ hen did you start using ADP computer 
equipment in the management of your 
information security program? 


How did you determine the need for 
computerization in your information 
security program? 


Did you have any difficulties in 
getting authorization for use of 
computer systems? What were the 
major difficulties? 
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4. What aspects of the information security 

program are being supported by ADP systems? 

{Brief explanation) . ' . 10 

a. Control system for accountable classified material, 
b’. Inventories? Top Secret? Secret? Confidential? 

c. Personnel security clearances? 

d. Control of passes? 

e. Mandatory review for declassification. 

f. Systematic review for declassification? 

(.. Other declassification programs? 

h. F0I.A requests involving classified information 
1. Other (specify) __ 


) 


5. Are reports generated as a result of ADP processing. 
What kinds? Are they used by other agencies? (If so 
explain.) How frequently are they updated? 


> 


6. Has the use of ADP systems in your information security 
program been evaluated for cost effectiveness? 

(If so, explain.) 
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7. Is manual processing oP.data a practical 
alternative in times of ADR computer- 
system outages? 


y* How many members of the security staff have had 

formal training in computer science? How many are 
qualified to operate a terminal to make inputs and 
retrieve information? 

) 


9. What problems have you encountered in application of 
ADR to the information security program (management 
and operational)? 


10. What benefits have you encountered in application of ADP 
"v to operation and management of the information security 
/ program, i.e. decreased costs, decreased personnel staff, 
improved controls, etc.? 


, 11. Would you recommend use of computers to agencies with 

limited information security programs? (Costs vs. benefits?) 

If so, in what areas? 

r 
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ROUTING AND RECORD SHEET 


SUBJECT: (Optional) 

Application of Automatic Data Processing Systems to Information Security 

PPOAA EXTENSION I NO. 

TKWnrt: npri IT TirU4 4-^ 


Thomas H. White 

Director of Information Services 
1206 Ames Building 


4 in » < A r> i's 4 


STAT 


TO: (Officer designation, room number, and 
building) 


OFFICER'S COMMENTS (Number each comment to show from whom 



RECEIVED 

FORWARDED 


1. 

D/ODP 

2D0105 Headquarters 


^)o 

± 

2 . 



3/ n 

(>o 

3 . 

J>j> 


V)1 

?J 

4 . 

C f A?S 


$ 1 ? 


5 . 

0DP/{o 


4 ^ 



FORM 41 A 
1-79 U 1 U 


USE PREVIOUS 
EDITIONS 




D 3/^ 6 


/-vOr 

/> ~$V^> y. 
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